针对随机时间片对抗的PA分析方法研究

针对随机时间片对抗的PA分析方法研究 Research of Power Analysis Against the Random Clock Countermeasure 唐明 TANG Ming 1 2 first-author 孙伟晋 SUN Weijin 1 王欣 WANG Xin 1 雷刚 LEI Gang 1 彭红波 PENG Hongbo 1 邱镇龙 QIU Zhenlong 1 李伟杰 LI Weijie 1 武汉大学计算机学院 武汉大学计算机学院 School of Computer,Wuhan University School of Computer,Wuhan University 空天信息安全与可信计算教育部重点实验室 空天信息安全与可信计算教育部重点实验室 Key Laboratory of Aerospace Information Security and Trusted Computing of Ministry of Education Key Laboratory of Aerospace Information Security and Trusted Computing of Ministry of Education 在抗功耗分析的实际应用中,随机时间片作为一种常见的对抗方法,具有安全性高和开发成本低的优点.本文针对现有随机时间片下的攻击方法普遍具有的复杂度较高,以及通用性较低的问题,提出两种新型的PA（power analysis）攻击方法,即当量法和相关性法.这两种方法分别通过对不同单位周期的功耗以及相关性的比较对功耗曲线进行分析,以较小的代价确定目标轮次所在位置,并对曲线进行对齐操作,实现有效的功耗分析.与已有攻击方法的比较,以及实验结果均表明这两种攻击方法能以较低分析复杂度和较少分析样本,对工业级密码芯片中普遍采用的以时钟周期为插入单位的随机时间片对抗方法进行有效攻击. Considering the balance between security and cost,the random delay countermeasure has been a common method in the application.In this paper,on the question of the high complexity and low generality of the existing methods,we propose two power analysis methods aimed at determining the location of the target round by comparing the value and correlation of one cycle with the others to achieve effective power analysis.Comparing with the existing methods,we show that the random delay countermeasure based on the clock period is unsafe,which can easily be attacked at lower complexity with fewer samples. 侧信道攻击 功耗分析 对抗方法 随机时间片 SCA（side channel attack） power analysis countermeasure random delay 10.14188/j.1671-8836.2013.05.009 TN918.2 国家自然基金（61202386,60970166,60970115,61003267）资助项目 2013-05-01 2021-04-01 5 59